A use-after-free flaw was found in cgroup1_parse_param in kernel/cgroup/cgroup-v1.c in the Linux kernel's cgroup v1 parser. A local attacker with a user privilege could cause a privilege escalation by exploiting the fsconfig syscall parameter leading to a container breakout and a denial of service on the system.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Feb 4, 2022 |
| Centos_linux | — | Upgrade kpatch-patch-4_18_0-348_7_1-debugsourceUpgrade kernelUpgrade kpatch-patch-4_18_0-348_12_2-debugsourceUpgrade kpatch-patch-4_18_0-348_7_1Upgrade kpatch-patch-4_18_0-348_2_1-debugsourceUpgrade kpatch-patch-4_18_0-348Upgrade kpatch-patch-4_18_0-348_2_1Upgrade kpatch-patch-4_18_0-348_7_1-debuginfoUpgrade kpatch-patch-4_18_0-348-debuginfoUpgrade kpatch-patch-4_18_0-348_12_2-debuginfoUpgrade kernel-rtUpgrade kpatch-patch-4_18_0-348_12_2Upgrade kpatch-patch-4_18_0-348-debugsourceUpgrade kpatch-patch-4_18_0-348_2_1-debuginfo | Mar 11, 2022 | Feb 4, 2022 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 4, 2022 |
| Oracle_linux | — | Upgrade kernel | Mar 11, 2022 | Dec 14, 2021 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Jan 20, 2022 | Jan 19, 2022 |
| Rocky_linux | — | Upgrade kernel-tools-debuginfoUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-develUpgrade kernel-coreUpgrade kernel-rt-debuginfoUpgrade kernel-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-coreUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-modules-extraUpgrade perfUpgrade kernel-rt-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-rt-debugUpgrade kernelUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-tools-libsUpgrade kernel-rt-coreUpgrade kernel-debug-modulesUpgrade kernel-tools-libs-develUpgrade kernel-toolsUpgrade kernel-rt-kvmUpgrade kernel-rtUpgrade python3-perfUpgrade kernel-rt-modules-extraUpgrade kernel-rt-develUpgrade kernel-cross-headersUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool | Mar 5, 2024 | Feb 4, 2022 |
| Suse | — | Upgrade dtb-xilinxUpgrade kernel-preempt-optionalUpgrade dtb-socionextUpgrade dtb-alUpgrade dtb-armUpgrade kernel-default-base-rebuildUpgrade kernel-preempt-livepatch-develUpgrade dtb-rockchipUpgrade dtb-amlogicUpgrade reiserfs-kmp-defaultUpgrade dtb-apmUpgrade kernel-preempt-extraUpgrade kernel-default-baseUpgrade cluster-md-kmp-preemptUpgrade kselftests-kmp-preemptUpgrade dtb-sprdUpgrade dtb-zteUpgrade kernel-default-extraUpgrade kernel-docsUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-obs-qaUpgrade kernel-obs-buildUpgrade dtb-amdUpgrade kernel-64kb-extraUpgrade gfs2-kmp-preemptUpgrade dtb-nvidiaUpgrade dtb-renesasUpgrade dtb-mediatekUpgrade kernel-64kb-develUpgrade kernel-debug-livepatch-develUpgrade kernel-defaultUpgrade dlm-kmp-defaultUpgrade kernel-macrosUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade kernel-debug-develUpgrade ocfs2-kmp-64kbUpgrade dtb-freescaleUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-symsUpgrade kernel-devel-azureUpgrade kernel-azure-optionalUpgrade dtb-alteraUpgrade dtb-allwinnerUpgrade kernel-debugUpgrade dtb-lgUpgrade kernel-azureUpgrade kernel-azure-extraUpgrade kernel-zfcpdumpUpgrade dtb-qcomUpgrade gfs2-kmp-64kbUpgrade kernel-64kb-livepatch-develUpgrade kernel-kvmsmallUpgrade kernel-default-livepatchUpgrade kernel-64kbUpgrade kernel-preemptUpgrade kernel-preempt-develUpgrade kernel-default-optionalUpgrade kernel-azure-livepatch-develUpgrade dtb-marvellUpgrade kernel-default-develUpgrade dtb-hisiliconUpgrade kselftests-kmp-azureUpgrade kernel-source-azureUpgrade ocfs2-kmp-preemptUpgrade kernel-develUpgrade gfs2-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-kvmsmall-livepatch-develUpgrade ocfs2-kmp-azureUpgrade dtb-caviumUpgrade reiserfs-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-docs-htmlUpgrade dlm-kmp-preemptUpgrade dtb-broadcomUpgrade kernel-64kb-optionalUpgrade kselftests-kmp-64kbUpgrade dtb-exynosUpgrade kernel-azure-develUpgrade gfs2-kmp-azureUpgrade kernel-sourceUpgrade reiserfs-kmp-preemptUpgrade cluster-md-kmp-azureUpgrade kernel-kvmsmall-devel | Feb 4, 2022 | Jan 31, 2022 |
| Ubuntu | — | Upgrade linux-oem-5.13Upgrade linux-fipsUpgrade linux-aws-5.4Upgrade linux-raspiUpgrade linux-oracle-5.4Upgrade linux-bluefieldUpgrade linux-gkeop-5.4Upgrade linux-oracle-5.11Upgrade linux-gkeUpgrade linux-azure-5.11Upgrade linux-azure-fdeUpgrade linux-gke-5.4Upgrade linux-oem-5.10Upgrade linux-aws-5.11Upgrade linuxUpgrade linux-ibmUpgrade linux-gcp-5.11Upgrade linux-azure-fipsUpgrade linux-gcpUpgrade linux-hwe-5.4Upgrade linux-azureUpgrade linux-gcp-fipsUpgrade linux-kvmUpgrade linux-raspi-5.4Upgrade linux-azure-5.4Upgrade linux-riscv-5.11Upgrade linux-oracleUpgrade linux-aws-fipsUpgrade linux-awsUpgrade linux-gcp-5.4Upgrade linux-gkeop | Nov 19, 2024 | Feb 4, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub